Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 626 | CVE-2021-30952Apple — Apple Multiple Products Integer Overflow or Wraparound VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.8 | 7.0% · 94.1st | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.070. | |||||||
| 627 | CVE-2008-3431Oracle — Oracle VirtualBox Insufficient Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 6.9% · 94th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.069. | |||||||
| 628 | CVE-2018-0159Cisco — Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 6.9% · 94th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.069. | |||||||
| 629 | CVE-2022-27518Citrix — Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 6.9% · 94th | 2022-12-13 | 2023-01-03KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.069. | |||||||
| 630 | CVE-2023-26369Adobe — Adobe Acrobat and Reader Out-of-Bounds Write VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 6.7% · 93.9th | 2023-09-14 | 2023-10-05KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.067. | |||||||
| 631 | CVE-2013-1675Mozilla — Mozilla Firefox Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 6.7% · 93.9th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.067. | |||||||
| 632 | CVE-2023-7024Google — Google Chromium WebRTC Heap Buffer Overflow VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 6.7% · 93.9th | 2024-01-02 | 2024-01-23KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.067. | |||||||
| 633 | CVE-2019-6693Fortinet — Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityRansomwareKEV since 2025 · listed over a year | 75 | 6.5 | 6.6% · 93.9th | 2025-06-25 | 2025-07-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 634 | CVE-2021-22600Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.0 | 6.6% · 93.8th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.066. | |||||||
| 635 | CVE-2026-34486Apache — Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 7.5 | 6.6% · 93.8th | 2026-08-04 | 2026-08-07CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.066. | |||||||
| 636 | CVE-2026-86060MikroTik — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityCISA federal deadline · Overdue by 40 days | 75 | 9.2 | 6.4% · 93.7th | 2026-09-10 | 2026-09-13CISA federal deadline · Overdue by 40 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.064. | |||||||
| 637 | CVE-2020-16010Google — Google Chrome for Android UI Heap Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 9.6 | 6.4% · 93.6th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.064. | |||||||
| 638 | CVE-2012-0767Adobe — Adobe Flash Player Cross-Site Scripting (XSS) VulnerabilityKEV since 2022 · listed over a year | 75 | 6.1 | 6.2% · 93.5th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.062. | |||||||
| 639 | CVE-2020-8468Trend Micro — Trend Micro Multiple Products Content Validation Escape VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 6.2% · 93.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.062. | |||||||
| 640 | CVE-2017-6627Cisco — Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 6.2% · 93.5th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.062. | |||||||
| 641 | CVE-2022-3075Google — Google Chromium Mojo Insufficient Data Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 9.6 | 5.8% · 93.2nd | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.058. | |||||||
| 642 | CVE-2022-26500Veeam — Veeam Backup & Replication Remote Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 8.8 | 5.8% · 93.1st | 2022-12-13 | 2023-01-03KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 643 | CVE-2026-105133Ahsay — Ahsay AhsayCBS Improper Authentication VulnerabilityCISA federal deadline · Overdue by 6 days | 75 | 5.5 | 5.8% · 93.1st | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 6 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.058. | |||||||
| 644 | CVE-2026-42208BerriAI — BerriAI LiteLLM SQL Injection VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 5.8% · 93.1st | 2026-05-08 | 2026-05-11CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.058. | |||||||
| 645 | CVE-2023-2136Google — Google Chrome Skia Integer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 9.6 | 5.7% · 93rd | 2023-04-21 | 2023-05-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.057. | |||||||
| 646 | CVE-2026-48558SimpleHelp — SimpleHelp Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 9.5 | 5.7% · 93rd | 2026-06-29 | 2026-07-02CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.057. | |||||||
| 647 | CVE-2010-3035Cisco — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 5.7% · 93rd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.057. | |||||||
| 648 | CVE-2022-20700Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 5.7% · 92.9th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.057. | |||||||
| 649 | CVE-2022-32917Apple — Apple iOS, iPadOS, and macOS Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 5.6% · 92.9th | 2022-09-14 | 2022-10-05KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.056. | |||||||
| 650 | CVE-2022-0492Linux — Linux Kernel Improper Authentication VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 7.8 | 5.5% · 92.8th | 2026-06-02 | 2026-06-05CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.055. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApple — Apple Multiple Products Integer Overflow or Wraparound Vulnerability
EVRS 75 Urgent
Rank 626 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 7.0% 94.1st percentile
- In CISA KEV since
- 2026-03-05
- CISA deadline
- 2026-03-26 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Oracle — Oracle VirtualBox Insufficient Input Validation Vulnerability
EVRS 75 Urgent
Rank 627 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 6.9% 94th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Cisco — Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 628 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 6.9% 94th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Citrix — Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 629 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 6.9% 94th percentile
- In CISA KEV since
- 2022-12-13
- CISA deadline
- 2023-01-03 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 630 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 6.7% 93.9th percentile
- In CISA KEV since
- 2023-09-14
- CISA deadline
- 2023-10-05 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Mozilla — Mozilla Firefox Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 631 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.5 NVD
- EPSS
- 6.7% 93.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Google — Google Chromium WebRTC Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 632 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 6.7% 93.9th percentile
- In CISA KEV since
- 2024-01-02
- CISA deadline
- 2024-01-23 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
EVRS 75 Urgent
Rank 633 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.5 NVD
- EPSS
- 6.6% 93.9th percentile
- In CISA KEV since
- 2025-06-25
- CISA deadline
- 2025-07-16 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 634 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.0 NVD
- EPSS
- 6.6% 93.8th percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Apache — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
EVRS 75 Urgent
Rank 635 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 6.6% 93.8th percentile
- In CISA KEV since
- 2026-08-04
- CISA deadline
- 2026-08-07 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
MikroTik — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
EVRS 75 Urgent
Rank 636 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.2 NVD
- EPSS
- 6.4% 93.7th percentile
- In CISA KEV since
- 2026-09-10
- CISA deadline
- 2026-09-13 CISA federal deadline · Overdue by 40 days
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
Google — Google Chrome for Android UI Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 637 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.6 NVD
- EPSS
- 6.4% 93.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Adobe — Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 638 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.1 NVD
- EPSS
- 6.2% 93.5th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Trend Micro — Trend Micro Multiple Products Content Validation Escape Vulnerability
EVRS 75 Urgent
Rank 639 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 6.2% 93.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Cisco — Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 640 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 6.2% 93.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Google — Google Chromium Mojo Insufficient Data Validation Vulnerability
EVRS 75 Urgent
Rank 641 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.6 NVD
- EPSS
- 5.8% 93.2nd percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Veeam — Veeam Backup & Replication Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 642 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 5.8% 93.1st percentile
- In CISA KEV since
- 2022-12-13
- CISA deadline
- 2023-01-03 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Veeam
- Source
- CISA KEV
Ahsay — Ahsay AhsayCBS Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 643 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 5.5 NVD
- EPSS
- 5.8% 93.1st percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 6 days
- Ransomware use
- Not known
- Vendor
- Ahsay
- Source
- CISA KEV
BerriAI — BerriAI LiteLLM SQL Injection Vulnerability
EVRS 75 Urgent
Rank 644 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.3 NVD
- EPSS
- 5.8% 93.1st percentile
- In CISA KEV since
- 2026-05-08
- CISA deadline
- 2026-05-11 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- BerriAI
- Source
- CISA KEV
Google — Google Chrome Skia Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 645 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.6 NVD
- EPSS
- 5.7% 93rd percentile
- In CISA KEV since
- 2023-04-21
- CISA deadline
- 2023-05-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
SimpleHelp — SimpleHelp Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 646 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.5 NVD
- EPSS
- 5.7% 93rd percentile
- In CISA KEV since
- 2026-06-29
- CISA deadline
- 2026-07-02 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- SimpleHelp
- Source
- CISA KEV
Cisco — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 647 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 5.7% 93rd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 648 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 5.7% 92.9th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 649 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 5.6% 92.9th percentile
- In CISA KEV since
- 2022-09-14
- CISA deadline
- 2022-10-05 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Linux — Linux Kernel Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 650 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 5.5% 92.8th percentile
- In CISA KEV since
- 2026-06-02
- CISA deadline
- 2026-06-05 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
